"The family of Android malware that slipped past security defenses and infiltrated Google Play is more widespread than previously thought. New evidence shows it was folded into three additional apps and has been operating for at least 10 months, according to security researchers." Google removed most of it, but not before it was installed anywhere between 2 to 9 million times - finally some figures from Google itself, and not scaremongering by antivirus companies. At 9 million, that's 1.2% of all Android devices sold.